(NASA-CP-1 
; A f L I Ni E 1 

E TATI HU V 

station; f i\ 




</ 

t 


NASA Conference Publication 10083 


Beyond 

the 

Baseline 1991 


Proceedings of the 
Space Station 
Evolution Symposium 


Volume 2: Space Station Freedom 

Part 2 


Proceedings of a conference held at 
South Shore Harbour Resort 
and Conference Center 
League City, Texas 
August 6-8, 1991 


NASA 

0083-Vol - ? - P t- 2 ) .,tVA%n Tut N92-1784 

9 9 1 : P a 0 C r t D I N 0 5 0 1 H h S P A C L - - T H K U — 

UI..UT10U SYMPOSIUM. VOLUME 2: SPAC' NO 2- 17 36 

E j 0 M , P APT J (Mi. A) 4o4 f> Unclus 

C'CL ? 2 B G'/IR 0062419 



NASA Conference Publication 10083 


Beyond 

the 

Baseline 1991 


Proceedings of the 
Space Station 
Evolution Symposium 


Volume 2: Space Station Freedom 

Part 2 


Proceedings of a conference held at 
South Shore Harbour Resort 
and Conference Center 
League City, Texas 


NASA 

National Aeronautics 
and Space Administration 

Scientific and Technical 
Information Branch 


1991 



Preface 


This publication is a compilation of papers presented at the Second Space Station Evolution 
Symposium: “Beyond the Baseline 1991" from August 6 - 8, 1991. The symposium was structured 
as a forum to discuss the current status and future plans for Space Station Freedom (SSF). The 
primary purpose of the gathering was to review the plans and progress in ensuring a baseline design 
with the flexibility to accommodate a broad range of potential utilization demands and to effectively 
incorporate technology advances over the lifetime of the facility. The timing of the conference was 
chosen at the critical juncture between completion of the Delta Preliminary Design Reviews and the 
Program Critical Design Reviews. 

The plenary papers describe the current status of the restructured Space Station Freedom design, the 
plans of the international partners, and future utilization of the facility. Related programs in advanced 
technology and space transportation are also discussed. 

The technical sessions represent the results of tasks funded by Level I Space Station Engineering in 
Advanced Studies and Advanced Development. The charts presented are amplified here by facing 
page text. The work was accomplished in fiscal years 1990 and 1991 and was presented by those in 
government and industry who performed the tasks. 

The results of SSF Advanced Studies provide a road map for the evolution of Freedom in terms of 
user requirements, utilization and operations concepts, and growth options for distributed systems. 
Regarding these specific systems, special attention is given to: highlighting changes made during 
restructuring; description of growth paths through the follow-on and evolution phases; identification of 
minimum-impact provisions to allow flexibility in the baseline, and identification of enhancing and 
enabling technologies. 

The activities under Advanced Development and Engineering Prototype Development (EPD) are 
targeted to improve the functionality and performance of baseline systems, thus providing options to 
the program which reduce schedule and technical risks. These applications have the potential to 
improve flight and ground system productivity, reduce power consumption and weight, and prevent 
technological obsolescence. Products of these tasks include: “Engineering" fidelity demonstrations 
and evaluations of advanced technology; detailed requirements, performance specifications, and 
design accommodations for insertion of advanced technology, and mature technology, tools, and 
applications for SSF flight, ground, and information systems. 


Dr. Earle K. Huckins, III 
Director, Space Station Engineering 
Office of Space Flight 
NASA Headquarters 
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Supports existing analysis methods 

Supports Fault Tolerance and Redundancy Mngt 
Analysis 
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. Such a technique is very useful in determining the effectiveness of the fault tolerance and 
redundancy management in the system's design. 




Johnson Space Center-Houston, Texas 

Engineering Prototype Automation and Robotics Division 
Development: , 

Failure Environment d.g. Lawier/ER22 mm 
Analysis Tool (FEAT) 


J 



00 

00 

o> 


■ • 



DC 




c 


c 

CO 

o> 

0) 

n 

< 0 



O) 

■D 

O 

a> 

co 


O a) 

cc 5 

o- 3 



o> 

00 o 
o> § 

o> 


C 

c 

CO m 

5? w 

<D (0 
A JS> 

c 2 

CD — 

E 5 


a. 

o 


o 

c 

a> 

D) 


CD 
> 

s £ 

I— <8 

< w 

LU 

u. : 




a> 

n 

-2 

‘5 

> 

co 



c 

a> 

3 

o 

co 

co 

c 

o 

73 

a> 

> 





a> 

T3 

CD 

3 

CO 

CO 

BMBi 

CD 

CO 

3 





1007 






Johnson Space Center-Houston, Texas 




to 

Off 

CM O 

LU ^ 

(JO 

<< 

Q.CD 

DC tz 

2§ 


(/) 

LU 


Q. 

O 

-I 

Ul 

> 

LU 

O 


2 

(0 

o> 


0) 

■O 

c 

3 

00 

00 

o> 


CO 

o> 

0) 

A 

CO 

E 

0) 

** 

CO 

>» 

CO 

(0 

h 

(0 

o> 

c 

o 

TJ 

g ® 

I 5 

o o 
*“ o 

0) QT 
3 


o 


■o 

CD 

ra 

o 

o 

CO 

CO 

CO 

c 

0) 

*2 

3 

A 

0) 


0) 

CO 

CO 

0> 


0) 

k_ 

i- 

!« 

2e 

o 0) 

T3 


0 

CO 

"0 

1 

< 

CO 

< 


o 

Q) 

JC 

O 

ft 

C 

CO 

O) 

3 

CO 

> 

■ 

O 

>* 

.fi 

*o 

CD 

w 

O 

CO 

c 

o 

CL 

CO 


k. JO 
CD C 
CO O 
3 4? 


JZ O) c 
** m - 


o « 

CD O 

r 2 


CO O 

£ o 

M_ U) 

O <g 

0) 

CO 


o 

c CO 
® w 
£ >* 
■D gj 

ss 

o co 

° « 

2 = 

®-g 

® o 

* E 


2 


•= o 


o> 

go 

T- CO 

•MB 

c > 
eS 

C0 v. 
D) ® 

O 

I? 

£ o 

Q ) •— 

> to 
® 3 
^ Q. 

S S 

S 0, 

LL 


§8 

S3 

0)0)0 
£ 0) '-£ 
I co g 

o k. c 
CD CD 
O CO JC 

O 30 

C ^ ® 

«£ E 
>.<»«! 
« ® <0 

Ob 3 ^ 
CO 5 CO 

-S co co 
cl ° 

“•-ft 

»_ c Q- 

0 ) — co 

3 » O) 
g-rSE 
E <g o> 

O <0 2- 

O g £ 
_ Q - k . 
“ 0) CD 

t/> £ .tr 

2«o« 

£ 

0-2 o 
5 s*® 

5 .22 jQ 
0)"° c 
11 8 

<2 «“ 
S cl 
? »S 
o £2 
m =E 
22 ’5 ® 
®^c 
® ©.2 
g-gs 

” CD ® 

28* 

LL 


O 

s 

® o> 

g-c 

o > 

® js 

£ CO 
CO ® . 

0) 0) CO 

zf 4k 


o> 

c 

■o 

c 

3 



.£ co ® ss 

H- •*- ■= 


” 22 to 
• 2 ^ 
« O o 

CD 0) S 

■gEi 

§ =■§ 
C c ® 


O) 

o> 

▼” O) 

ft* 

o 

CO 
0) 


8 go 

w-“ 22 
k. o o 
0 ) ® 0 ) 
S2 a>!C 

£ tO ® 

o 2-0 

CD ?;« 

g^S 

IS o to 

3 

2 E ° 
> a) a) 
o> £ £ 
s o ■*- 

c * O) 

S-O.E 

o|S 

~*£ « 

>ax) 

£> o 


CO 

o 

"3 

O 

A 

o 

DC 

00 


CO 

E 

o 

+■* 

3 

< 

O 

■o 

0) 


■o 

22 

to 

g>8 

o>£ a> 

. C x 

■2 0) CO • 

® 'D >*22 

g IS* 

| 2^< 

2 o) ® c 

I 2®e 

c “"2 8k 
£ C 3 

f* CO CO 

» ■O 0) g 
to ® ® 5 
5) n 3 ^ 

® CD o >» 

o £5 O 

- -£| 

g =Eo 

f- 0) co 3 
*- > LL T3 

O ® _ ® 

C O.Z'D n 

•c u- 2 c §. 
a. co o) to ££ 

CO CO 0) <D 3 

5 0 = 2“ 

U *H (0 

- 2 ° ffl£ 

s jo£o 
« 2,°-— 'O 

S 3 3 CD 
| ?!!£§ 
« S3?« 

CB 411 mmm C * 



Ss£ si 


•= 8 1 
in Sz o 
u. 


I E 

£ O 
O U 

Q. 

CO 


£■ <5 *2 to -o 

2 ®?-g ® 

.? CO O 

° f«8.2 

® -> Ex-O 
H S 



1008 


Johnson Space Center-Houston, Texas 


LU 



LU 


O 

Ul 

CD 

O 


0 


LU 

0 


0 

0 


■Q 

CO 

Q. 

CO 

o 

0 

"55 

>* 

CO 

c 

CO 

"U 

c 

CO 

O) 

c 

mmmm 

0 

"O 

O 

E 


0 

0 

■MM 

> 

o 

a! 


3 

O 

O) 

3 

O 


0 

0 

3 


0 

O) 

"O 

0 

3 

o 

c 

0 

3 

"5 


c E 
.S> 0 
-E 0 


0 

0 


Q. 

0 

O 


1009 


program lifecycle 

•• Integrate into other applications and environments 




Johnson Space Center-Houston, Texas 




« 

o 

£ 

© _ 

Sc 

3 O 

wmm •mm 

S g 

o o 

II 

0 > ♦= 
A H— 

o 

2 <D 

3 W 

3 o 

Q.A 
<0 «-* 
O O) 

O.S 

** ■o 

0 ) o 

« 2 

IS 

0. c 

li c 


LL 


© 


(/>■= 

CO ® 

© Q) 

■g 2 
c o 
® o 

S 3 

iS 

3 C 
© <D 

3 E 
Q. 0 ) 

TO® 

ll 

Q> 

.2 c 
** •= 

« = 2 

o'? 0 ) 

£ 1(8 


m 

Egg 

a S 3 

o g_o 
to® 

•Is 

#sS 

o“^ 

3 © = 
O’tS *- 
_ C «0 

2 ® O 

C.E E 
& 0 ) 

— — fl) 

= 0 £ 
£} g- +-« 

2.5 s 

a t n 
o£ £ 
to © o 
© c’-c 

Is* 

2 5= 2 

f-A 3 

j •- 2 


S' 

s* 

•o S' 


8 


© _ 
o 2.2 
.22 c 
275 2 
o-r 2 to 


© OL~ 

o. 


« -=■ — o 


a .=■ o © *■* © o 
~42 « >.£ 

•S3©© C ■=£ 

U in £ 


3 ’O 

■o © 

2 O 

■Dg 

g© . 
* © ® 
A > 

^ __ © 
to to > 
o © 

2 m 1 - 

o c E* 
Z o2> 

3 2 © 

atj 5> 
a c £ 

5 ®3 
to *o 

c-g'g 

== o c 
Q- to © 

E< © 

2 2 
o j Q- 

0) O'D 

to 1 1 

i= © 08 

»ch 
c c ^ 

O^S 

E «IL 

(D •— — , 

■S .2 

O 5= 

~ © O 
© >. 


s 


o> 


E »3 

O Ec I 

s 2 r © 

Q. M A 

| 8 §° 

3 ®.E © 

SSE? 

•= 5 ® S 
2 © > 
O.T3 09 


</> 


© 

© O© 

EZ I 

© ©2 

© c re 

!«a 

Sec 

© o 

ill 

LU 1 

U_ 


2 

© 

► 1 © 
ns A 

£ g- 

C ©*5 

« £ M 

k£ w 

H .«§ 

sii 
<s a | 

C © o> 

0- 0 t 

°-o ° 
0.2 © 

3 .*© 

«£ © 

= n'S 

= Q._ 

A ©•= 

© O ® 

© 75 g 

= §•§ 

w M 

>*® © 

© A *” 

JtO) . 

s*i| 

?ss£ 

.Ecu© 
Jr o to C 

8 2=5 ■ 

tS.il 

£i|£ 

i:|i 

AC©© 

= 5 ® <5 

*S^S 

h ©L e 

< Q-** I 
So : g 
u-c .£ 

C 0££ 

® to to o 
tjs£c 

E-os = 

^ C ft 4- 
® © 2 3 

1- 



1010 




Johnson Space Center-Houston, Texas 


O 

> 

Q 

co 

o 

o 

JQ 

o 

DC 

■O 

c 

m 

c 

o 

CO 

E 

o 

3 

< 


o> 

CO 

CO 


CM 

CM 


DC 

LU 


CL) 

5 


CD 

Q 


© 

CL 

5 k 

2 - 
o § 

£ E 

o> 

c 2 
•c a> 

<D > 
$ <i> 

CQ 

’5 

c 

LLi 


§< 

1 2 

LU CO 

©W 

» co 

CO r; 
LL< 


a 













x 

0 

Q. 



0 

O) 

co 




co 

c 

CO 


a> 

To 

CO 

CO 

E 

a> 

to 

>. 

CO 

*D 

c 

CO 


a> 

D) 

co 


o 

co 

<o 

> 

CO 

c 

CO 

CD 


= CO 
JQ C 
CO CD 


a> cd 


a> 

o 

TJ 

o 

5 

o 

c 

a> 

3 



CO 

E 



CO 


0 

0 

0 

0 

o 

c 





« * 
0 2 
S a- 

J5 E 
c o 
LU O 





101 1 


Support for engineering design (e.g. system 
evolution) training, operations, etc. 

Cost savings from maintenance of single data source 
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•• STS (e.g. MMU) & SSFP systems 
Support additional digraph applications 
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Support for SSFP & STS training script development 
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•• e.g. - Temporal modeling and analysis 
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• Flight Software should be Designed to 
Incorporate Modifications while Minimizing 
Recoding 
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the Software Support Environment (SSE) to 
Provide Flexible and Cost-Effective Software 
Development in Addition to Configuration 
Control 
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Safety Due to the Development of 
Effective Procedures 


ADVANCED FLIGHT SOFTWARE 
RECONFIGURATION 


■u 

0 

3 

C 


O 

0) 

H 

Li. 

Ul 

Z 

Ui 

ffl 


c 

0.2 

85 

9- Q-o) 
co co o 

o< ^ 

o ^ ^ 

<0 © g 
co£ 5 

<D ** g 

c OQ, 
0 +- 

> a> C 

o 5 ” 

| Q g 

LU O = 
» o 

C -JS-hZ 

» (o^ 

0 3 0 
0 0)0 
coz: o 
0 cCC 

o o i- 
r qU- 

£ oOT 
©DCW 

s ® $ 

oC ® 
0) 3Z 

Of*. 

Q. CO O 


CO 

Is 

TJ O 

So 

O. OQ 
O O) 

S.E 

st; 

3 o 
rah- 

!g 

o .2 
o 0 
0 c 
DC 0 

H- C 

o — 

<0 £ 


0 

0 


o 0 
0 
0 
0 


o>_ 

= c 0 
<=5CE 

0 > 

* 2 3 

® a. -o 

C Q 
O > li 

mm cl 


1029 


Potential Cost Avoidance of Existing 
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• Unisys 386SX/16 MHz System Simulates tl 
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Tools and Procedures Adapted for Space 
Shuttle Reconfiguration will be Integrated into 
the SPF on an Item-by-ltem Basis 
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ADVANCED FLIGHT SOFTWARE 
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• Genetic Algorithms 

• X-Window tools 

SSFP engineering prototype development) 
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ADVANCED SOFTWARE 
DEVELOPMENT WORKSTATION (ASDW) 

The ASDW project has been studying ways to apply knowledge 
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the developed applications. It contains the knowledge of the 
users guide and advises the user as well as doing constraint 
testing. Some JSC applications require thousands of inputs and 
require expert users several weeks to set up and debug. 
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INTELLIGENT INTEGRATED CASE (CONCEPTUAL OVERVIEW) 
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GROWTH: NASA is heavily process oriented for producing 
products of various types. All types of processes conducted by 
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The need for Cooperation 



COOPERATION BETWEEN LOOSELY COUPLED AGENTS 
IS AN EFFECTIVE MECHANISM TO OVERCOME 
PHYSICAL BOUNDS ON COMPUTING POWER 



A I ACT/\ Johnson Space Center 

■ W \ Information Systems Directorate 
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Distributed. Intelligent Systems 
SSFP Integration 
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immediate NASA benefit 
committed ownership by user 
potential for multiple applications 
low risk and cost 
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• Process for bringing CASE technology into an organization's 
culture 

• CLIPS/CLIPS Ada language for developing expert systems 
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Operations Mission Planner 


Eric Biefeld 

Jet Propulsion Laboratory 
Abstract 

The scheduling of Space Station Freedom must satisfy four major 
requirements. It must ensure efficient housekeeping operations, 
maximize the collection of science, respond to changes in tasking and 
available resources, and accommodate the above changes in a 
manner that minimizes disruption of the ongoing operations of the 
station. While meeting these requirements the scheduler must cope 
with the complexity, scope, and flexibility of Space Station Freedom 
operations. This requires the scheduler to deal with an astronomical 
number of possible schedules. 

JPL has been researching advanced software scheduling systems for 
several years (DEVISER, SWITCH, PLAN -IT, RALPH, PLANNER, and 
OMP). Our current research, the Operations Mission Planner (OMP), is 
centered around minimally disruptive (non-nervous) replanning and 
the use of heuristics limit search in scheduling. OMP has already 
demonstrated several new Al-based scheduling techniques such as 
Interleaved Iterative Refinement and Bottleneck Identification using 
Process Chronologies. 

We are currently delivering these techniques to JSC for integration 
into the COMPASS scheduling tool. The first test case will by the 
Shuttle Systems Engineering Simulator (SES) 
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Background 


The scheduling of Space Station Freedom must satisfy four major 
requirements. It must ensure efficient housekeeping operations, 
maximize the collection of science, respond to changes in tasking and 
available resources, and accommodate the above changes in a 
manner that minimizes disruption of the ongoing operations of the 
station. While meeting these requirements the scheduler must cope 
with the complexity, scope, and flexibility of Space Station Freedom 
operations. This requires the scheduler to deal with an astronomical 
number of possible schedules. 

JPL has been researching advanced software scheduling systems for 
several years (DEVISER, SWITCH, PLAN-IT, RALPH, PLANNER, and 
OMP). Our current research, the Operations Mission Planner (OMP), is 
centered around minimally disruptive (non-nervous) replanning and 
the use of heuristics limit search in scheduling. OMP has already 
demonstrated several new Al-based scheduling techniques such as 
Interleaved Iterative Refinement and Bottleneck Identification using 
Process Chronologies. 

Concurrently, JSC and McDonnell-Douglas (MDAC) are performing 
work on developing interactive scheduling tools for use by ground 
personnel and astronauts on the Space Shuttle and for Space Station 
Freedom (SSF). This task is led by Dr. Barry Fox of MDAC, Houston 
and is sponsored by NASA Codes M and ST and contracted from the 
Software Technology Branch under Robert Savely at JSC. 

These two efforts complement one another. The usefulness of 
interactive tools for scheduling will be enhanced by removing some 
of the burden from ground-based and astronaut users by automating 
aspects of the scheduling process. 
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Objective 


Deliver software implementing functional capabilities 
for automated scheduling from JPL to Mr. Savely’s and 
Dr. Fox’s effort at JSC/MDAC to support SSF scheduling 
needs. 
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Why? 


Scheduling and resource allocation needs for NASA are manifold: 
Maximizing science data collection, ensuring efficient routine 
operations, minimal disruption of ongoing activities during timely 
responses to unexpected events like transient science opportunities 
and resource disruptions. Currently most flight projects' schedules 
are largely built and maintained manually. 

Future flight projects like SSF, EOS, or CRAF/Cassini, will demand a 
higher level of complex scheduling extended over large continuous 
periods of time. These flight projects may also require distribution of 
the scheduling task through out the various science communities. 
This will place exorbitant demands on the current style of highly 
manual scheduling. Emerging Al-based technology can provide 
automated assistance in the form of human/machine cooperative 
scheduling tools. 

JSC with McDonnell-Douglas (MDSSC) is performing work on 
developing interactive scheduling tools (COMPASS) for the Space 
Shuttle and for Space Station Freedom (SSF). This task is led by Dr. 
Barry Fox of MDSSC, Houston, is sponsored by NASA Code MD. Our 
work on OMP complements the COMPASS work. The usefulness of 
interactive tools for scheduling will be enhanced by removing some 
of the burden from users by automating aspects of the scheduling 
process. A Code MT funded task exists to transfer OMP automated 
scheduling techniques to COMPASS. 
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Benefits 


OMP will reduce the time and effort necessary in both generating 
and maintaining a mission plan. 

Performance Enhancement: 

OMP will allow the schedulers to spend more of their time in 
optimizing the schedule. This will lead to an increase in the 
science return of a mission. Also since the time to modify a 
schedule can be reduced it will become feasible to change the 
science request in response to earlier science observations. 

Cost Reduction: 

Automated scheduling will enable the creation of schedules in 
significantly less time and with substantially less human 
involvement. This can lead to a direct reduction in the size and 
numbers of the scheduling teams. 

It will be faster, less expensive, and less disruptive to modify a 
schedule. The OMP approach, allows modification of an executing 
schedule while also maximizing the return received from that 
schedule and minimizing disruption. 

The subsequent costs of using the schedule will be reduced 
because changes in the schedule will be automatically tracked. 
The use of a standardized, computer-based medium for schedule 
representation will enable the automated use of the schedule as 
input to other processes. 
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Recode OMP Modules in ADA for COMPASS 



Approach 

The approach to automated scheduling developed in OMP is based on 
the process used by expert human schedulers in planning the use of 
scientific instruments for Voyager planetary encounters This 
approach highlights several new Al-based scheduling techniques. 

The major innovation is the incorporation of multi-pass scheduling — 
Interleaved Iterative Refinement — where the scheduling system 
builds and refines a schedule over a series of passes. During the 
passes OMP constructs chronologies to assess progress and effort 
expended during the evolution of a schedule. The chronologies are 
used to identify schedule bottlenecks and focus the search process. 
This approach allows the same system to be used for both schedule 
construction and dynamic replanning. Details are in "Operations 
Mission Planner Final Report", JPL Publication 89-48, by E. Biefeld 
and L. Cooper. 
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Reactive Scheduling 

Since the world is not a static place, replanning is a functional 
requirement for scheduling. Events in the real world change the 
assumptions upon which a plan is based. These events can be 
spectacular. For example, the first pictures returned by Voyager of 
Jupiter’s moon, Io, showed a volcanic eruption. The mission scientists 
immediately requested changes in Voyager’s schedule to obtain more 
information on this totally unexpected event. Most events are, 
however, more mundane and happen well in advance of the 
encounter. 

A currently popular approach to automated replanning is to simply 
plan again. The knowledge base and input tasks are updated and the 
software scheduler is rerun. The software scheduler then produces a 
new schedule which accomplishes the new tasks using the modified 
resources. Each time the scheduler runs, however, a radically new 
schedule is produced. 

This approach leads to nervous replanning. This nervous behavior 
arises due to the underconstrained nature of the scheduling problem. 
For any mission scheduling-type problem, there exist many 
acceptable solutions that are radically different. Any change, 
however slight, in the planner’s inputs may cause the planner to 
explore an entirely different section of the solution space. This 
change in the search will, most likely, lead to a schedule radically 
different from the original schedule. Mission planning is known to 
be extremely input-sensitive. 

For a scheduler to survive in an operational environment it must be 
capable of making small changes to an existing schedule. If the 
inference engine must do extensive backtracking in order to change a 
task, then the scheduler is destined to exhibit nervous replanning. 
The old schedule must therefore be an input to the scheduler. The 
scheduler knowledge base must include the operational cost of 
making a change to the existing schedule, and the scheduling 
inference engine must accommodate this operational requirement for 
non-nervous replanning. 
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Automated Scheduling 

The scheduling problem devolves into controlling the search through 
a very large and complicated problem space. Brute-force search 
mechanisms are incapable of supporting automated scheduling with 
realistic and acceptable response times. Instead, heuristics are used 
to determine how to conduct the search. 

Heuristics are simply rules of thumb which guide the performance of 
a given activity. Research at JPL has characterized three types of 
heuristics: (1) assessment heuristics, which assess the state of the 

schedule and provide information on how well the scheduler is 
performing; (2) dispatch heuristics, which perform the actual 
scheduling actions; and (3) control heuristics, which set and change 
the focus of attention of the scheduling process . The heuristics are 
the “brain” of the scheduling system. They determine what areas of 
the schedule to concentrate on; what types of changes to make; and, 
based on how well the scheduler is doing, when to change 
approaches. 

In order to control the search, the scheduler must know about the 
difficulties arising in the particular schedule. The scheduler must 
identify the problem contention areas, called bottlenecks. Once this 
information is available, the scheduler can then use that information 
to direct the search process. This type of use of heuristics has been 
used in Ralph , a scheduler for the NASA Deep Space Network, and 
OPT and OPIS for factory scheduling. 
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Iterative Refinement 


Iterative planning consists of a series of scheduling phases. Each 
phase is responsible for a different aspect of the overall planning 
process. The first of these techniques roughs out the plan and 
identifies areas of high resource conflicts. The later techniques use 
the knowledge of the resource conflicts to refine the plan and solve 
many of the scheduling problems. The final techniques try to solve 
the last of the conflicts and add a few more tasks. Once the schedule 
is executing, changes are accomplished by reverting to the 
appropriate planning phase and making use of the information 
available on the schedule up to that point. During each phase, the 
scheduler cycles through its scheduling activities until it determines 
that a change in phase is appropriate. 

By specializing the planning techniques associated with each phase, 
the techniques can be made more efficient. For example, the first 
techniques use shallow searches over a broad spectrum of tasks. 

Later techniques will use deeper searches which are applied to only 
a limited number of tasks. They will use knowledge about the 
particular schedule (i.e., the current resource conflicts, which tasks 
have changed most often in the scheduling process) to constrain the 
search space. The techniques will employ either a shallow and broad 
search or a deep and narrow search. If a planner must perform a 
broad and deep search, it will not be able to generate a schedule in 
any reasonable time. However, if the planner is always restricted to 
a shallow search, it will generate a severely suboptimal schedule. 
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Chronology 


A chronology is a limited history of the scheduling activity that has 
taken place. The chronology does not keep a complete snapshot of 
the changes taking place during the scheduling process. Rather, it 
focuses on characteristics which can provide information useful in 
directing subsequent searches. The chronology is used to identify 
interactions between time regions across several resources, detect 
the termination condition of a scheduling phase, and identify tasks 
that cause problems for the scheduler. Because we use an iterative 
approach to planning in which the scheduler focuses on either 
resources or tasks, the chronology keeps either resource or task 
information, depending upon the phase. 

There are two activities associated with the chronology system: (1) 
collecting the information and (2) analyzing this information to 
characterize the schedule. During the multiple passes of each 
scheduling phase, information is collected to help the scheduler 
identify when the goals for that phase have been accomplished. For 
example, during the resource-centered phase, the goal is to identify 
the bottlenecks. Information which enables the scheduler to 
determine the boundaries of the bottlenecks is collected and 
analyzed. Once the bottleneck areas have been identified, that phase 
is complete and the scheduler changes its focus to perform 
bottleneck-centered scheduling. 
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Bottleneck Identification 


The identification of bottlenecks is an important and necessary step 
for effective scheduling. The exact location and extent of the 
bottlenecks are highly context-dependent. Since the scheduler 
cannot anticipate where the bottlenecks will be located, the basic 
approach is to perform a simple exploration of the schedule space 
and use the information gathered to identify the bottlenecks. 

After performing the initial expansion of the tasks into activities, the 
scheduler focuses on the area in the schedule with the most conflicts 
The scheduler performs a shallow search, which lowers the number 
of conflicts in this area. Only the activities that are involved in the 
conflict are modified. The chronology module records the impact of 
these modifications on the resources. 

While the search tries to avoid creating new conflicts, it will create 
them if necessary. The magnitude of these new conflicts may be 
larger than the magnitude of the original conflict that initiated the 
search. The scheduler will eventually focus on one of the new 
conflict areas. Solving this area may, in turn, cause other conflicts 
and so on, until the original conflict spot is once again in conflict. As 
the search progresses through the oversubscribed resources, the 
level of conflict in these and other areas oscillates. The conflict areas 
that continually oscillate in this manner are classified as potential 
bottlenecks. 

As the scheduler focuses on a single conflict area, several other areas 
will be affected by the subsequent search. Since the conflict level for 
all these affected areas is modified during the same focus state , these 
areas and the conflict changes are all associated in the system’s 
chronology. This chronological association of the oscillating resource 
areas allows the chronology module to group these areas into 
bottleneck regions. 
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OMP Architecture 


One of the major benefits of the use of AI in automated planning is 
the decoupling of the schedule model from the scheduling engine. 

This allows the addition of different types of tasks and resources 
without requiring changes to the scheduler. A generalized view of an 
intelligent scheduling system is given in the opposing view graph. 

The major components of the system are the knowledge bases, the 
data bases, the heuristics, and the schedule itself. The information in 
these distinct areas are integrated by the scheduling engine which 
produces the actual schedule. 
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Search Paradigms 

At its highest level of control, OMP is a “Hill Climber.” Hill climbing is 
a search strategy where neighboring nodes are evaluated to identify 
the best next step to take to improve the schedule. Hill climbers are 
fast and generally find a “good” schedule, but they don’t provide a 
complete search. The major flaw with hill climbers is that they get 
caught at local maximums. 

The classical approach to solving the local maximum problem is to 
add randomness to the evaluation function (simulated annealing), 
thereby allowing the scheduler to move beyond the local maximum. 

OMP’s approach is to vary search strategies based a characterization 
of the problem area. Essentially, OMP changes the evaluation 
functions over the local regions in order to search using the most 
appropriate strategy. 
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OMP Architecture - 2 


There exist many different scheduling heuristics that focus the 
search on a particular aspect of the schedule. While these techniques 
exhibit excellent performance in some cases, they are not universally 
applicable. Therefore, the scheduler must identify when a particular 
scheduling heuristic may be appropriate. The iterative refinement 
approach is based on making the most effective use of the various 
scheduling heuristics. 

In using the search, there is a trade-off between power and time; the 
deeper the search, the longer the time required. The use of a deep 
search over the entire schedule is infeasible and unnecessary, but 
limiting the deep search to limited segments where a less powerful 
search is ineffective is productive without incurring unreasonable 
costs. 

The chronology system provides the necessary information for the 
control heuristics to determine which scheduling heuristics to use 
and where. This provides the scheduler with the flexibility 
necessary to approach the variety of scheduling problems 
encountered in the generation of a single schedule. This, in turn, 
enables the scheduler to expend a greater amount of effort on tightly 
focused areas, thus producing a more effective schedule. 
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Common Graphics Substrate 

During the past year a group of individuals from various NASA 
scheduling projects formed an informal working group to address 
issues in building portable scheduling graphics. The members of this 
group have built scheduling graphics in support of their research 
(PLAN-IT, COMPASS, OMP, and RALPH). While on the surface these 
graphical interfaces are not identical there is much commonality in 
their components. The results of this working group is an outline of 
a Scheduling Graphic Substrate. This substrate would support a 
verity of GUE features and be applicable for all of our different 
scheduling engines. It would also modularize the windowing system 
specific code to allow easier porting of the system from platform to 
platform. 
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OMP - COMPASS Integration 


There are three stages to the OMP - COMPASS integration. In the 
first stage COMPASS builds a file of the schedule and the changes 
that need to be made in the schedule. OMP can then read this 
standardized file and modify the schedule. OMP will then produce a 
standardized file continuing the new schedule that COMPASS will 
then read in and display. The advantage of this approach is that it 
will be easy for other systems other than OMP to use the same 
techniques to preform joint test and demonstration with COMPASS. 

In the second stage both OMP and COMPASS will be closely coupled. 
COMPASS will invoke the OMP module and pass it the schedule 
information. OMP will then represent the schedule in its own 
internal format, modify the schedule and return the results to 
COMPASS. COMPASS will once again display the results. In this stage 
OMP will be directly called by COMPASS (as a button or buttons on 
COMPASS display) and the data transfer will be by directly function 
call and return. 

In the third stage selected modules of OMP are recoded into Ada. 

This code will directly use the COMPASS internal data structures and 
will become part of the COMPASS program. 
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Initial OMP - COMPASS 


We have already sent a file continuing COMPASS output to OMP. 
OMP reads in this data and produces a modified schedule. The 
output will then be sent in a file back to COMPASS for redisplay. 


, tflMO NTTUNECK ACTIVITIES 
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Accomplishments (FY91) 

In FY91 we have finished demonstrating the concepts of interleaved 
interative refinement and bottleneck identification using process 
chronologies. These concepts form the core of OMP architecture. 

The newest concept demonstrated is the integration of Operation 
Research techniques with the chronology system. This will become 
the basis for out future work. 

The new hardware platforms (SUN SPARC and Macintosh) have been 
procured and installed. The basic schedule representations are being 
ported to Common LISP and are being revised to support the newly 
designed scheduling engine. A set of graphical scheduling animation 
primitives have been implemented on the SUN SPARC and on the 
Macintosh workstations. 
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Plans (FY92) 


During FY91 we will complete the implementation of OMP on a SUN 
SPARC and Macintosh workstations. The new implementation of OMP 
will prototype the Load and Optimize phases of the general OMP 
scheduling theory. The basic representation of OMP will be 
expanded to include several new constraints (Renewable- 
Consumables, States) and will feature an extended version of its 
current goal planning capability 

This new version of OMP will be transferred to Code MT by way of 
JSC’s COMPASS scheduling system. A COMPASS generated schedule 
and a new unscheduled activity will be sent electronically to OMP 
where the schedule is modified to include the new activity. The 
resulting schedule is then sent to COMPASS to be displayed. 

Other goals for this year include implementing the generic scheduling 
graphics substrate in both X-Windows.and the MacToolBox. 
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Summary 

The demonstration of multiple classes of scheduling knowledge, the 
use of chronologies to identify scheduling bottlenecks, the 
classification of these bottlenecks in determining which type of 
scheduling heuristic to use, and the interleaving of finding and 
solving bottlenecks, were all major research objectives demonstrated 
in the OMP prototype. This prototype was tested using COMPASS 
supplied data from a real world scheduling problem. The purpose of 
developing these techniques is to show the feasibility of an automatic 
scheduler which can use the knowledge gained in trying to construct 
a schedule and which operates by continually modifying an existing 
schedule. These techniques allow the construction of automatic 
schedulers which will be able to quickly and optimally construct 
large and complex schedules. The same systems will also be able to 
maintain the schedule in a minimally disruptive manner. 
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10.2 - 14.7 psia, Increased: suit pressure, prebreathe 
02, N2 mixture protocol, suit & glove mobility 
(Shuttle) 
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A 30 minute emergency open-loop life support capability is provided by a regulated 6000 psia 
oxygen package. This unit is not rechargeable on-orbit. 

The STS EMU is currently certified for 3 EVAs per Shuttle mission between ground checkout cycles. 
Some limited life components currently constrain the maximum time between uses to 60 days. 
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ADVANCED THERMAL CONTROL SYSTEMS 
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- RADIATOR/VENTING LIQUID OXYGEN 
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ADVANCED VENT LOOP COMPONENTS 
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PRIME MOVERS 
- AIR BEARING FAN 
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In addition to these C02 and H20 removal components, development is underway for a low volume, 
and low power air bearing fan with variable speed control having potentially lower maintenance 
requirements than the current fan/pump/water separator assembly. 
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FUEL CELLS (FCESS) 
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ADVANCED CONTROLS. INSTRUMENTATION. 
AND INFORMATION DISPLAYS 
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Upgrade of CL umbilical 
interface assembly 




HOOKS AND SCARS FOR ADVANCED EMU - TEXT 

The advanced EMU system configuration and technoiogies have many growth paths and the NASA 
has not selected any particular configuration. Sufficient hooks and scars should be incorporated 
into the baseline that complement inherent baseline growth capability to ensure that promising 
growth paths are not precluded. 
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Mode n+1 : SSF-to-4 EMUs including forward link(FL) data 
— Recommend further evaluation to define all growth modes 
Less cost than hardware upgrade later in program 
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upgrades which require hardware changeouts. 


SPACE EXPLORATION INITIATIVE 


I 



1225 














SPACE EXPLORATION INITIATIVE-TEXT 

EVA mission requirements for the Space Exploration Initiative (SEI) (i.e. Lunar base and manned Mars 
missions ) will bring about additional changes in EMU technology development. While the development 
of an SSF EMU is the first step to the development of an SEI EMU, additional technologies are required 
for EVA in partial gravity and partial atmospheres. 
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SCAR UTILITY DISTRIBUTION * GROWTH FUNCTION DESCRIPTION 




INTERNAL AIRLOCK INTERFACES FOR ADVANCED EMU 

■ On-orbit plumbing upgrades to support advanced EMU servicing system 
possible using swage process baselined for fluid line maintenance and 
repair 
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• Upgrade volume and weight estimates consistent with baseline 
constraints 

— Assumes worst case impacts to servicing system 
On-orbit upgrade of CL umbilical equipment also required 


ANNUAL IV CREW TIME REQUIREMENT 



EVAS / YEAR 





ANNUAL LAUNCH VOLUME COMPARI 



> O - 1 3 2 UJ • il t- co 
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EVAS / YEAR 





ANNUAL LAUNCH MASS COMPARISON 


| 
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EVAs / YEAR 
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Increasing reliability of hardware 
Optimizing recovery of mass 
Increasing autonomy of operation 
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high and medium priority technology development needs are described below. 
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Closed Environment System 
Hi^h Component Noise Reduction 

Medium Leak Detection 
Medium Particulate Contamination Monitor 
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subsystems 
scheduled control 


The ECLSS Advanced Automation Project 
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The system is heavily monitored and timed, scheduled control is used. 



The ECLSS Advanced Automation Project 
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embedded firmware with some flight software supervision 
still basically open-loop, heavily monitored, scheduled control 


Restructured Regenerative ECLSS Description 
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Notice that the Water Recovery System is the end of the line for contaminants in the 
air and water - where the buck stops - and chemical and microbial faults would 
propagate to this reservoir. 
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Man Systems: 

sink, shower, clothes wash, etc 



The ECLSS Advanced Automation Project 
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Fault detection is finding that a fault has occurred. Fault diagnosis is 
discovering which component of the subsystem caused the fault and 
how it occurred. 


The ECLSS Advanced Automation Project 
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The ECLSS Advanced Automation Project 
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support. 
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The ECLSS Advanced Automation Project 
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Technical Approach Description 
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The ECLSS Advanced Automation Project 
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Specific Implementation 
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The ECLSS Advanced Automation Project 
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list Fault Candidates = (R 1 , V 1 ,P 1 ,PX) 
3) Isolate Fault by weeding this list by 
checking sibling sensors and 
back propogation of the discrepancy 
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Environmental Control System History Description 
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Distributed Computing Environment Description 
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— The ECLSS Advanced Automation Project => 

Distributed Computing Environment 



Sensor, Component, 
and Window 
Prioritization 











Implementation and Tools Description 
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ECLSS Predictive Monitoring development is compatible. 


Baseline Integration Description 
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implies that since we are helping to develop test equipment, then by default, we are 
developing ground support equipment because the same equipment is designated to 
migrate to the ground support facility. 
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Testing support Equipment is Ground Support Equipment 
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Integrated Schedule Description 
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Future implementations of life support systems will be more 
autonomous due to this project. 
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TITLE 


ECLSS Predictive Monitoring: 

Automated Evaluation of Sensor Placements 

Dr. Richard J. Doyle 
Dr. Steve A. Chien 

Artificial Intelligence Group 
Advanced Information Systems Section 
Jet Propulsion Laboratory, M/S 301-490 
California Institute of Technology 
4800 Oak Grove Drive, Pasadena, CA 91109-8099 

presented at 

Space Station Evolution: ’ 

Beyond the Baseline 
League City, Texas 
August 8, 1991 

I 

I 

The trend for many years as space platforms have become more complex has been to 
oversense these systems, to anticipate unforeseen fault modes and sensor failures. 
However, this strategy becomes untenable when the amount of sensor data becomes 
too great for operators to assimilate and interpret, and when the cost, launch weight, 
and power consumption of too many sensors becomes unacceptable. 

On Space Station Freedom (SSF), design iterations have made clear the need to 
keep the sensor complement small. Along with the unprecedented duration of the 
mission, it is imperative that decisions regarding placement of sensors be carefully 
examined and justified during the design phase. 

In the ECLSS Predictive Monitoring task, we are developing Al-based software 
to enable design engineers to evaluate alternate sensor configurations. Based on 
techniques from model-based reasoning and information theory, the software tool 
makes explicit the quantitative tradeoffs among competing sensor placements, and 
helps designers explore and justify placement decisions. This work is being applied 
to the Environmental Control and Life Support System (ECLSS) testbed at MSFC to 
assist design personnel in placing sensors for lest purposes to evaluate baseline 
configurations and ultimately to select advanced life support system technologies for 
evolutionary SSF. 
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BACKGROUND 


JPL is conducting research on advanced monitoring systems which maximize 
feedback of engineering information from complex, dynamic space systems where 
human and computational resources are constrained. This work has impact upon 
both real-time monitoring (sensor selection) and system design (sensor placement). 

MSFC and Boeing contractors are working on fault detection, isolation, and 
recovery (FDIR) for SSF ECLSS and are performing tests on and evaluating designs 
for SSF ECLSS hardware. 

The ECLSS Predictive Monitoring task will transfer results on real-time monitoring 
capabilities and sensor placement guidance from work on the SELMON system at JPL 
to MSFC to support ECLSS testbed activities addressing SSF baseline and evolutionary 
requirements. 
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ECLSS Predictive Monitoring task 

sensor placement guidance during system design 

and sensor selection for real-time monitorinq 


PROBLEM 


Sensor placement is the task of determining a set of sensors which allows the most 
accurate, safe, and reliable determination of the overall state of a monitored system 
while minimizing sensor power consumption, cost, computing power requirements, 
and weight. Reducing these quantities is particularly important in space-borne 

systems due to power and payload restrictions. In complex systems, this minimization 

task can be quite difficult. 
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in complex systems (SSF ECLSS), minimization is difficult 


OBJECTIVE 


The objective of this project is twofold: Current work is aimed at providing ECLSS 

design engineers with software tools for evaluating alternative baseline SSF sensor 
placements. More specifically, to assist ECLSS designers in verifying that proposed 
baseline sensor configurations ensure safe, reliable monitoring while minimizing 
power, weight, computing requirements, and monetary cost. For evolutionary SSF, 
automated sensor placement will facilitate the utilization of advanced life support 
technologies (e.g. closed-loop regenerative life support) with more complex 
monitoring requirements which were unacceptable for baseline ECLSS because the 
monitoring requirements could not be easily met with available techniques. 
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Evolutionary: Enable utilization of more advanced 

technologies while maintaining mon 


BENEFITS 


Our approach uses a model-based simulation capability to evaluate how each sensor 
rates with respect to several monitorability measures over the behavior space of the 
monitored system. These scores can then be used to evaluate a proposed sensor 
configuration. 

This sensor placement evaluation capability provides a number of benefits. First, 
this evaluation capability will aid designers in the sensor placement task by 
facilitating evaluation of alternative sensor placements. In particular, this 
capability would provide a quantitative measure of tradeoffs in sensor placements 
which previously have been viewed only subjectively. A second benefit is that 
quantification of sensor placement measures will aid in design documentation by 
allowing quantitative justification for sensor placements. Third, the automated 
evaluation capability will facilitate assessment of the impact of system design 
changes upon sensor placements. Finally, as a fourth benefit, this sensor placement 

evaluation capability can be used to aid in sensor power planning. When the utility 
of a sensor depends greatly upon the operating mode of the monitored device, it may 
be possible to reduce overall sensor power consumption by powering certain sensor 
suites only in limited operating modes. Because our approach measures the utility of 
sensors in each system operating mode, it can assist in sensor power planning. 
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Facilitates sensor power planning. 


MODEL-BASED APPROACH 


Our approach to sensor placement can be described generally as follows: 

1. Given nominal behavioral models of the system and a causal simulation capability, 
generate a behavior space for the system. 

2. Apply monitorability measures for sensitivity, cascading alarms, and potential 
damage to simulated system operation over these operating modes. 

3. Compute teleological analysis scores. 

4. Compute sensor placement recommendations as those with highest scores from the 
analyses. 
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MONITORABILITY MEASURES 


Our model-based reasoning approach to evaluating sensor placements uses four 
monitorability measures. Sensitivity Analysis suggests sensor placements which 
measure quantities which have the greatest impact upon the overall state of the 
system. Cascading Alarm Analysis suggests sensor placements which measure 
quantities whose changes have the potential to generate many alarms. Potential 
Damage Analysis suggests those sensor placements which measure quantities which 
are likely to cause permanent damage to devices in the system being monitored. 
Teleological Analysis suggests sensor placements which monitor quantities relevant 
to specified operational goals of the system. Our approach uses a model-based 
simulation capability to evaluate how each sensor rates with respect to each of these 
measures over the behavioral space of the monitored system. These scores can then 

be used to generate a proposed sensor set. 
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THE SSF ECLSS TESTBED AT MSFC 


Our sensor placement approach is being tested upon the water reclamation subsystem 
of the Environmental Control and Life Support System (ECLSS) for Space Station 
Freedom. A model describing the behavior of the multifiltration (MF) subsystem in 
terms of fluid flow and heat transfer has been constructed. This model was developed 
via a combination of study of design documentation (i.e. schematics, etc.) and 
consultation with domain experts (e.g. the operators of the testbed). This model has 
been validated by comparison against actual data from the subsystem testbed 
undergoing evaluation at the Marshall Space Flight Center (MSFC) in Huntsville, 
Alabama. We are in the process of extending our model to cover more of the ECLSS 
subsystems, including the air recycling subsystem. 
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THE MULTIFILTRATION SUBSYSTEM 


The ECLSS multifiltration (MF) subsystem consists of two parts — the sterilization loop 

and the unibed assembly. In this subsystem, the water first passes through a pump at 
the inlet to the system. Next, the water passes through a coarse filter before entering 

the sterilization loop. In the sterilization loop the water is heated in the regenerative 
heat exchanger and then by the in-line heater. The in-line heater has only a coarse 

temperature control and thus the water temperature here may differ by as much as 
10° F from the goal of 250° F. Within the sterilizer reservoir, the temperature of the 
water is maintained more accurately at 250°F for about 9 minutes. In the second 
portion of the subsystem, the water passes through a set of unibed filters designed to 
remove particulate contaminants from the water. Possible sensor types are flow rate, 

water pressure, and temperature. Possible sensor locations are indicated in by ovals. 

Specified operational goals are: 

1. maintain processed water at 250°F in sterilizer reservoir for 9 minutes; and 

2. maintain water flow through the unibed of at least 15 mL/minute. 


1328 



Advanced Development Program 







SENSITIVITY ANALYSIS 

Sensitivity Analysis measures the sensitivity of other quantities in the monitored 
system to changes in a given quantity. This measure depends upon information 
about "normal" magnitudes of change for the devices in question. For each normal 
operating mode of the system, the following procedure is followed. For each quantity 
Q e MonitorableQuantities (the set of all monitorable quantities in the model), 
determine nominal operating values and alarm ranges. Next compute a normalized 
change increase AQ+ and decrease AQ- as the average amount of change between 
updates for that operating mode. Next, for each quantity Q, beginning with an initial 
state where all devices/sensors are at nominal operating values, simulate a change 
AQ in Q, propagating this change to other quantities in AllQuantities (the set of all 
quantities in the model), as dictated by the model. For each such changed quantity Q' 

€ AllQuantities, for each time the quantity changes during the simulation, collect a 
sensitivity score proportional to the amount of change in Q' from its normal value 
Q'nominal relative to alarm thresholds but also modified by a decreasing function of 
time 1 . This calculation captures the notion that delayed and less direct effects are 
more likely to be controllable and less likely to occur. Thus, a change which affects a 
quantity Q' but occurs slowly is considered less important. This simulation proceeds 
for a preset amount of simulated time. Then, for each changed quantity Q', take the 
maximum of the collected change score for that quantity. The sensitivity score for Q 
is the sum of these maximums for all the Q's. Thus, for each quantity Q, a simulated 
change produces a set of changescores for other quantities in the model. The 
sensitivity score for Q is the sum of the respective maximums of each of these sets^. 
The computation of the sensitivity scores is shown below. 

Simulate a change AQ+ or AQ- to Q beginning at time 0 and continuing to time AT (a 
user-supplied default). 

For each change to a quantity Q’ occurring at time T C hange< compute a change 
score as follows. 

let Q'new be the new value for Q’ 

IQ'new ■ Q’nominal! (AT - T c hange) 

changescore(Q') = • 

IQ alarm * Q'nominal! AT 

add this changescore to the set of collected changescores for Q' 

let MaxChangeScore(Q') = the maximum of the set of collected changescores for Q' 

let sensitivity(Q) = ^ MaxChangeScore(Q') 

Q'e AllQuantities 

The overall sensitivity score for Q is then computed by summing the sensitivity 
scores for AQ+ and AQ- weighted by relative frequency of increase vs. decrease for Q. 


1 This can be viewed as an average dQ'/dQ modified by a decreasing function of time elapsed and 
normalized for the alarm threshold for Q'. 

^Quantities which do not change when Q is changed produce an empty set of changescores. We 
define the maximum of this empty set as 0 for the purpose of the sensitivity summation. 
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identify those sensors which, when undergoing change, 
result in the greatest global change within the system 


SENSITIVITY RECOMMENDATIONS 


Sensitivity Analysis suggests the specific placement of 
relief valve at point 7. This is because the relief valve 
pressure at point 7 is above 40 psig, the relief valve will 
the system behavior. The opening of the relief valve 
significant pressure loss, as well as significantly affecting 


a pressure sensor near the 
is pressure controlled; if the 
open and drastically change 
would cause an immediate 
flow in the MF subsystem. 
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recommend pressure sensor at point 7 because 
pressure there affects the operation of the relief valve, 
which significantly affects overall system operation 



CASCADING ALARMS ANALYSIS 


Cascading alarms analysis measures the potential for change in a single quantity to 

cause a large number of alarm states to occur, thus causing information overload and 
confusion for operators. As with sensitivity analysis, cascading alarms analysis is 

performed for each operating mode of the monitored system. For a standardized 
amount of increase and decrease for each monitorable quantity Q, the effects of such 
a change are propagated throughout the system and the number of triggered alarms 
is counted. This standardized amount of change is different from the measure used in 
the sensitivity analysis as normal changes are not likely to produce cascading alarm 
patterns. The alarm count is then normalized for the total number of possible alarms. 

The weight of each alarm state triggered is also decreased as a function of the time 

delay from the initial change event to the alarm. This has the effect of focusing this 
measure on quickly developing cascading alarm sequences which are the most 
difficult to interpret and diagnose. The computation of cascading alarms scores is 
shown below. 

Simulate a change AQ+ or AQ- to Q beginning at time 0 and continuing to time AT (a 
user-supplied default) where AQ+ and AQ- are functions of the distance between the 
nominal value for Q and the alarm value for Q in the increasing and decreasing 
directions respectively 


]jjr InAlarm(Q') 

Q'e all quantities 

let CascadingAlarm(Q) = 

number of quantities Q' 

where InAlarm(Q') = (AT - T a i arm )/AT 

if Q' entered an alarm range during the simulation 
and T a ] arm is the earliest time Q' was in an alarm range 
and 


InAlarm(Q') = 0 

if Q’ did not enter an alarm range during the simulation. 
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identify those sensors which, when in alarm, have the greatest 
potential to create alarm states elsewhere in the system 


CASCADING ALARMS RECOMMENDATIONS 


Cascading alarms analysis suggests placement of flow rate sensors because 
significant perturbations in flow rate can cause cascading temperature and pressure 
alarms. 
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recommend flow sensor at point 2 because anomalous flow 
can cause cascading pressure and temperature alarms 



POTENTIAL DAMAGE ANALYSIS 


Another measure is potential damage analysis, which is computed in two parts — 

predictive potential damage and potential damage detection. Predictive potential 

damage measures the capability of a sensor to predict damage to devices in the * 

system. For each device and quantity associated with that device, there is an 

associated operating range which is judged to be harmful to the device. Predictive 

potential damage analysis is performed by simulating a change in each monitorable 

quantity Q and scoring upon the basis of how many devices will enter harmful 

ranges due to the change in Q. Predictive potential damage analysis scores are • 

moderated by the number of control points which may interdict the damage. For the 

causal path leading to the damaged device, for each mechanism (arc in the causal 

graph) which can be influenced by a controllable parameter, the potential damage 

score is reduced. The potential damage measure depends more critically upon 

domain-specific information beyond the schematic, as many of the potential damage 

scenarios involve device or subsystem interactions. The computation of potential 

damage scores is shown below. 

Simulate a change AQ+ or AQ- to Q beginning at time 0 and continuing to time AT (a 
user-supplied default). 

let PotentialDamagePredict(Q) = ^ Damaged?(Q') 

Q'e all quantities 


where (AT - T a i arm ) 

Damaged?(Q’) = 

AT x (control + 1) 

if Q' entered a damaging range during the simulation where T a i arm is 
the earliest time Q' was in a damage range and control is the number of 
control points in the causal chain leading to the damaging quantity 
value and 

Damaged?(Q') = 0 

if Q' did not enter a damage range during the simulation. 

The second part of potential damage analysis is damage detection. In this measure, 
the model is used to simulate devices in the system entering damaging operating 
modes, and potential sensors are scored upon the basis of how much they change (in 
the same manner as the sensitivity analysis). Damage detection analysis is 
performed by propagating a change resulting in a device entering a damaging 
range, and measuring the resulting change in other sensors as in sensitivity 
analysis. Those sensors which change more significantly to indicate the damaging 
device state are scored higher by the damage detection analysis. Let AQ'+ or AQ'- be 
changes sufficient to cause Q' to enter a device damaging range. Simulate a change 
AQ'+ or AQ'- to Q' beginning at time 0 and continuing to time AT (a user-supplied 
default). 

let PotcntialDamageDetect(Q) = ^ Changescore(Q) 

Q'e all quantities 
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identify those sensors which predict or inform 
of permanent damage to the system 


POTENTIAL DAMAGE RECOMMENDATIONS 


Potential Damage Detection Analysis suggests placing a temperature sensor a 
If the in-line heater overheats, it could cause the water flowing through to 
to an unacceptably higher temperature than normal. 


point 4. 
be raised 
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recommends temperature sensor at point 4 
to detect a damaging overheating of the 
in-line heater immediately upstream 




TELEOLOGICAL ANALYSIS 


The final measure is teleological analysis, which does not use the model-based 

simulation capability. Instead, teleological analysis directly examines mechanism 
dependencies in the causal graph to produce a sensor placement score. 

Teleological analysis suggests measurements of quantities which provide the most 

direct feedback on operational goals of the system being monitored. In this measure, 
those quantities directly mentioned in the operational specifications of the system 
are scored highest, those quantities directly influencing these quantities are scored 

next highest, etc. The exact computation of the teleological measure involves 

backtracing the causal graph. Directly monitorable quantities appearing in the goal 

description receive a score of 1. For each mechanism affecting the goal quantity, a 

teleology score inversely proportional to the number of such mechanisms is divided 
equally among the inputs to the mechanism. Thus, if there are m mechanisms 

affecting a goal quantity, and one of these mechanisms has n inputs, each such input 
receives a score 1/m n . Note that multiple independent causal influence paths 
combine additively. While this process proceeds recursively for mechanisms 

potentially influencing the inputs to the given mechanism, each level is multiplied 
by 1 /d where d is the number of mechanisms (arcs in the causal graph) distant from 

the goal quantity. 


1342 


Advanced Development Program 



j 

o. 

"i 


1343 


identify those sensors which correspond to quantities 
most directly related to operational goals of the system 


TELEOLOGICAL RECOMMENDATIONS 


Teleological Analysis suggests placing flow rate sensors at point 8 to verify the flow 
of water through the unibeds as the flow rate is directly mentioned in the 

operational goal specification. Teleological Analysis also scores highly a flow rate 

sensor in the sterilizer reservoir (point 5), as this quantity determines the time spent 
by the water in the sterilizer reservoir. Finally, Teleological Analysis suggests 
placement of a temperature sensor for the sterilizer reservoir (point 5), as this 

quantity appears in the operational goal specification of the system. 
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recommends temperature and flow sensor at point 5 
because of the temperature and time goals of the 
sterilizer reservoir; recommends a flow sensor at point 8 
because of the unibed flow goal 



COLLABORATION 


JPL and MSFC personnel are collaborating in the ECLSS Predictive Monitoring Task. 
JPL personnel are developing information quantification and model -based reasoning 
techniques applicable to both sensor placement for monitorability and sensor 
selection in monitoring. In support of these goals, MSFC personnel are assisting by 
providing technical expertise to support the construction of models of ECLSS 
subsystems. Additionally, MSFC personnel are providing ECLSS testbed data to be used 
in testing the sensor placement and sensor selection software being developed at JPL. 
As results from this testing become available, they are made available to MSFC 
personnel who provide feedback on the value and accuracy of sensor placement and 
sensor selection recommendations. This feedback is used to refine the methods and 
software being developed at JPL. 
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feedback from 
domain experts 
on sensor 
recommendations 
for ECLSS 


SCHEDULE 


The first users of the sensor placement evaluation and generation capabilities 
developed in this task will be the MSFC ECLSS design team led by Environmental 
Control and Life Support Branch Chief K. Mitchell. 

FY91: The design for the sensor placement evaluation tool based on four 

monitorability measures has been completed. A proof-of-concept^ demonstration 
will be completed for the SSF ECLSS MF subsystem. Causal modelling efforts have 
been targeted for the water reclamation subsystem of ECLSS. 

FY92: The proof-of-concept sensor placement tool based on monitorability measures 

will be extended to a functional prototype system. This full-capability system will be 
available for evaluating proposed baseline ECLSS sensor configurations. Although 
the delivery date for this system will miss the POST milestone for the air side of ECLSS, 
it will precede the POST milestone for the water side of ECLSS by 6 months, the POST 
milestone for integrated ECLSS subsystems by 12 months, and the first BOST deadline 
for ECLSS (air side) by ~18 months. Also, in FY92, a design and proof-of-concept 
demonstration for a sensor placement evaluation tool based on diagnosability 
measures will be completed. Causal modelling efforts on the water reclamation 

subsystem of ECLSS will be completed and modelling efforts on the air recycling 
subsystem will be initiated. A design for a sensor placement generation tool also will 
be developed. 

FY93: The functional prototype sensor placement tool based on monitorability 

measures will be extended to a pilot system. The proof-of-concept sensor placement 
tool based on diagnosability measures will be extended to a functional prototype 
system. This full-capability system will be available for evaluating proposed baseline 
ECLSS sensor configurations. Although the delivery date for this system will miss the 
POST milestone for the air side of ECLSS and coincide with the POST milestone for the 
water side of ECLSS, it will precede the POST milestone for integrated ECLSS 
subsystems by 6 months, and the first BOST deadline for ECLSS (air side) by -12 
months. Also in FY93, causal modelling efforts on the air recycling subsystem will be 
completed. A proof-of-concept demonstration for a sensor placement generation tool 

will be completed. 

FY94 & FY95: The functional prototype sensor placement tool based on diagnosability 

measures will be extended to a pilot system. Both pilot sensor placement evaluation 
tools will be available for evaluating monitoring and diagnosis requirements for 
advanced life support technologies for evolutionary SSF. The proof-of-concept 
system for a sensor placement generation tool will be extended to a functional 
prototype system. Sensor configurations obtained with this software tool will be 
available for evaluation. In FY95, the functional prototype system for a sensor 
placement generation tool will be extended to a pilot system. 


^ A proof-of-concept (POC) system is one which works correctly on a specific example or set of 
examples but is not designed to be robust and extendable. A functional prototype system is one 
which provides full capability, is robust and extendable, and is delivered both for actual use and 
for rigorous testing and evaluation in a real setting. A pilot system is one which has been refined 
through feedback provided on the functional prototype system and is delivered for general use 
with stated and frozen design specifications. 
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SUMMARY 


The trend for many years as space platforms have become more complex has been to 

oversense these systems, to anticipate unforeseen fault modes and sensor failures. * 

However, this strategy becomes untenable when the amount of sensor data becomes 

too great for operators to assimilate and interpret, and when the cost, launch weight, 

and power consumption of too many sensors becomes unacceptable. 

On Space Station Freedom (SSF), design iterations have made clear the need to 
keep the sensor complement small. Along with the unprecedented duration of the * 

mission, it is imperative that decisions regarding placement of sensors be carefully 
examined and justified during the design phase. 

In the ECLSS Predictive Monitoring task, we are developing AI -based software 

to enable design engineers to evaluate alternate sensor configurations. Based on 
techniques from model-based reasoning and information theory, the software tool 
makes explicit the quantitative tradeoffs among competing sensor placements, and 

helps designers explore and justify placement decisions. This work is being applied 

to the Environmental Control and Life Support System (ECLSS) testbed at MSFC to 
assist design personnel in placing sensors for test purposes to evaluate baseline 

configurations and ultimately to select advanced life support system technologies for 
evolutionary SSF. 
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ECLSS sensor configurations. 

• Will be applied to ensure monitorability of advanced life 
support technologies for evolutionary SSF. 
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transfer the advanced technology to appropriate flight centers t 
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controlled degrees of freedom. Supervised autonomous control included the 
development of remote site task execution primitives including Generalized 
Compliant Motion. 


JPL 



1362 


I 


k 


CO 

H 

£ 

w 

S 

a 

CO 

h— I 

fa 

cm 

§ 

o 

o 

o 

< 

co 

a 

a 

co 

rH 

05 

I* 

fa 


y 

0) 

•n 

pQ 

o 

s 

o 

£ 

£ 

o 


fa 
O 

a 

H 
2 
O 
O 
fa U 
> o 

HH fi 

us 

57 ■ +J 
fa 3 

O 2 

8t 

s I 

* . 

31 

3 a 

Q | 


- 6 
bO 3 

c o 


co 

0 


© 
3 

h 0 

2 2 
— o 

fa J 5 

0) 

Q, CO 

2 o 

0) U 

fa 


CO 

© 


§ 

H 


fa 2 

cd H 

fa a 

S 8 

1 s 

*■4 {m 

e ? 
8 « 
13 fa 

© e.. 


fa © 
© fa 

Sh -+J 
CD rj 

a) i 

*rj 

. * 
fa •*» 

■+J Sn 
. © 
& a 

fa 3 
© O 
© u 

*.S 

Jn o 

S s 

o CO 

h •+* 

c 0 
c fa 

o 


0 

y 


fa 

3 

3 


3 2 
fa — 

CO fa 

— © 
fa fa 

S c 

O cd 

. a 

h x 

o ® 

CO 0 
J*' 

S, ^ 

u 2 
© £ 

0, e 
3 S 
co s. 

© * 
fa n 

H J 

0 

s- 


fa o 

co 
© 
> 
O 

s 


o 
£ 

fa ^ 
© 

3 ^ 
C 


fa 

3 

cd 

y 

© 


o fa 


3 

u 

© 


0 

3 

0 


a E 

° i 


© 

fa 

H 


o 

y 


© 
. fa 

-W -+J 

y ^ 

© o 
•n y 

fa 3 
O 0 

3 S 
O 0 

S E 


fa co 

© © 
co y 

3 o 
© fa 

CO ^ 

» *3 

© c 

2 S 

fc © 
»o 

**"* 3 

Q) 

fa © 

-M CO 

® g 
g S 

g« fa 
E *3 

O fa 

y >. 
© > 
fa CO 

is © 
O y 

-W 

fa 2 

8 © 

3 © 

co © 

*- 3 
3 cr 
O co 


§ .s 

3* co 

I o 

0 _Q 


CO 

© 

y 

Ch 

<2 

-w 

y 


i 

o 


3 

3 


O 

fc4 

3 

O 

y 


3 *fa E 

j_a ^ ** 


a 

p S ? 


3 =* * 


O 

c* 

O 

£ 


y 
© 
fa 

© 

N 
© 

© © 

g, fa 
cr 

co Cm 

i o 

> to 

o -g 
£ *S 

t5 © 

© fa 

fa sW 
O 3 


© 

O 

CO 

3 

fa 

3 

© 

y 

S3 

u 

2 

0 


-w 

y 

© 

3 

© 

© 

•n 

fa 

0 

O 

© 

© 

fa 

fa 

K 

•w 

© 

• 

-*> 

> 

3 

0 

3 

© 

fl 

3 

3 

3 

3 

O 

fa 

«-i 


> 

co 

3 

© 

© 

y 

Ui 

co 

2 


© 

fa 

> 

3 

o 

3 

E 

■4J 

fa 

y 

© 

3 

3 

*— 5 

fa 

0 

y 

© 

© 

fa 


0 3 


fa 

© 

S3 

2 

© 

3 

© 


CO 

3 

£ 


a 

2 

u 

3 

O 

O 


© 

y 

3 

fa 


■§ a 

© 

© © 
5 1 

.5 J) 


3 

O 


1363 


capability. 


FY91 STATUS/ACCOMPLISHMENTS 


-M 

O 

0) 

O 

S3 

o 

s 

e 

o 


bO 

S3 


o 

H 
2 
o 
o 

w O 

> 0) 

HH fi 

w 

Ph ed 
O 3 

81 

§3 

P5 w 

1 1 

j ’S 

< £ 

« i 

H 


o 

Sh 

-** 

3 

o 

U 

TJ 

0) 

Sh 

ed 

J3 


co 

O 

*3 

O 

w> 

S3 

• p* 

ed 

Ui 

0) 

a 

o 

o 

O 

r* 

s* 

-2 

o 

$H 

-M 

S3 

O 


o 

Sh 

-M 

S3 

O 

O 

>> 

Sh 

o 

CO 

> 

Sh 

a) 

a 

3 


S3 

O 

*p-< 

o 

s 

-M 

S3 

cd 

"a 

£ 

o 

O 

T3 

0) 

N 

•P* 

ed 

Sh 

a> 

S3 

0) 


co 

<D 

U 

Sh 

£ 

o 

pD 

c§ 

"ed 

3 

Q 


3 

O 


co 

O 

a 

E 

o 

u 

0) 

Q 

v 

N 

a) 

Q) 

3 

cr 

co 

• 

a) 

> 

o 


y+j 

T 3 

O 

T 3 

0 

PH 

H 3 

0 ) 

’■a 

0 ) 

3 

a) 

-M 

rj 

-M 

3 

•w 

ed 

c 3 

n 

3 

Sh 

ed 

Sh 

CO 

u 

CO 

1 

S* 

CO 

3 

0 ) 

3 

Id 

3 

0 

3 

0 

3 

O 

£ 

o 

£ 

P 

£ 

a> 

1 

a) 

1 

a) 

P 

1 

Q 

1 

P 

• 


• 


• 


1364 



JPL 


cd 

H 

2 

fa 

s 

a 

IX! 

HH 

fa 

fa 

S 

o 

u 

o 

cd 

0 

1 

CD 

tH 

C5 

fa 


CD 

H 

2 

fa 


fa 

fa 

X 

fa 

£ 

O 

<! 

o 

ffl 

fa 


o 

S3 

fa 

0 
0) 

•*a 

0) 

fa 

5 ® 

cd *2 
*rj cd 

fa g 

> CO 

1 ® 

O > 

-M ** 

fa “ 
® S3 

E § 

** g 

fa 

t: g 

2 fa 

fa jk; 

(j) CD 

M 

^ -W 

to *t! 

G a 
<D ® 

S 6 

fa o 
S3 • w 

fa 

X .s 

® £ 
>> o 
fa 

O to 

cd o 

*h a 


o 

fa 

ed 


cd 

-M 

O 

0) 

fa 


co 
3J 
O " 

S <1 


£ 


>> 

bO 

O 


1365 


FY91 STATUS/ACCOMPLISHMENTS 


cn 

H 

2 

w 

S 

hH 

PL, 

X 

w 


£ 

o 

<3 

o 

PQ 

hJ 


I U 

5 ,2 

s s 

- S3 
faO S3 

c o 

*S O 

Ui _ 

5 1 

• P*4 

T5 *"» 

A V 

I? 3 

#* 

Id » 

cl) c 
*►2 

CO c 
^ V 

p— * Q, 

n ° 

- Sh 

a o 
w o 

£ Q 

o - 

PM 

-tJ cO 

C > 
cd 0 

— g 
g tf 

O \ 

u § 

• • • ^ 

<— H -u 
O *i 

u o d 

■4J CO > 

G S3 O 

6 M s 

u D « 

g £ fil 

io> 


i 

0) 


CO .z. 
y -m 

^ »p* Lj 

M C D 

O 

t- 


3 

O 

b£> 

S3 

• p* 

£ 

£ 

c2 

t-i 

s 

o 

c 

o 

U 

•*» 

c 

o 

• pp 

+3 

S-i 

y 

to 

c 

t— I 

S3 

• pP 

Ph 


o 

(n 

-M 

S3 

0 

U 

s 

fcp 

C 

1 

Id 

G 

Q 


CD 


CO 

G 


G 

O 

TJ *■§ 
S3 
cd 

® .& 
W> G 
S3 

CO S 



1366 



CD 


H 

Q 

2 

0 

fa 

H 

§ 

cn 

X 

fa 

CD 

O 

hH 

fa 

2 

CL, 


S 

s 

0 

Pi 

0 

0 

0 

fa 

< 

ri 


fa 

m 

fa 

X 

H 

X 

<J 

0 

H 

H 

cn 

< 

rH 


Oi 

fa 


fa 

fa 

0 


fl i 
© £ 
CO w 

© 0 ) 

g s 

& Sh 
CO fO 

• mi HH 

0 fl 
*3 o 
u "-Z 3 
© cd 

3 $H 

o © 
u a 


o 

© 


cd 

-4J , , 

Cd fll 

TJ -w 

*13 *** 
fl 0 
cd co 

T> 2 

© ^ 

c 2 

_w> 6 


CO 

© 

T3 

CO 

cd 

£ 

>> 

TJ 

3 

co 

© 

u 

3 

cd 


© 

© 

Sh 

-fl 

-u> 

bO 

3 

• 

Sh 

© 

a 

g 

o 

V 

CO 


s - 


T3 

3 


© fl « 

flog 

V 3 O 

7 -w 

<H )L| -M 

© 35 

k! 0 ) 2 

3 * fl TJ 

a :r < 

o — r 

c 5 a 

OOO 

.13 B -g 
«g® 

O ^ #1 

a £ c 

•0 4 iS 

« II 

* § I 

o c 

o © 

_ _ Sh 

© Cd _. 

.© 0 ? 
cd 

B « ° 

§ £ S 

^ © .fl 
— T c 

O n O 
£ •* £ 

§i» 
u © *© 
TJ ® - 

2 ■« 1 

cd ^ cd 

rfl fajO •» 

co c g 

^ **3 o 


$H 

<2 

T3 


fr O ^ 
o © i 

a s a 

« - -a 

S w> § 

o C r „ 

3 T 3 fl 
”30 

3 1j *-5 
>>.3 0 

W © 
© ,22 co 
fl 
O 
”0 

bO 
fl 

• 9 m 
© 

JD 

co 


3 *g 
co O 

© . 

Sh Sh 

o 

co +3 


3 

O 

» 

(-* 

© 


3 

u 

© 

a 

o 


CO 

3 

O 


24 

2 cd 

,2 o 

bO *2 

c .g _ 

£ 5S S 

s 5 “ 


Sh 

5 


Sh 

eg 

© 

a 

t. 2 

o -g 
Id H 


CO 


Sh 

© 

a 

0 

a 


£ 

£ 

Sh 

© 


~ 3 © 

g g ts 

O Sh Sh 
*-£ £ © 
S S.g 

a a > 

0 © © 

J8 8 * 

® co 

u 


O 

s 


<! -o 
s 
3 


g>S 2 

S 2 D 

8 &g 

33 O O 


\ co 

bo 33 
fl 0 
*3 to 

Id ® 
© ** 
co © 

3 S jg 

0 H 

22 . 

co 

© Sh 

*E 3 

2 S 

3 © 

S & 

3 a) 
«■• "fl 
>> 

33 4h 
© O 


a 

3 

2 

• pm 

3 

23 

© 

© 

Sh 

.0 


c 

0 
• tm 
H-9 

3 

© 

© . 
X w 

© © 
w u 

^ s 

co © 

«W © 


1367 


FY91 STATUS/ACCOMPLISHMENTS 


>H 

Q 

fa 

H 

cn 

fa 

fa 

2 

< 

S 

rt 

o 

fa 

PS 

fa 

fa 

o 

«! 

PS 

fa 

fa 

o 



CO 

CO 

y 

CJ 

0 

u 

fa 

1 

£ 


co 

'So 

>> 

13 

c 

C 

13 

£ 

cd 

c 

o 

y 

o 

fa 

cd 

■+j 

cd 

£ 

c 

bJD 

• i-* 

co 

0) 

0 

£ 

0) 


CO 

CO 

Q) 

CO 

CO 


0) 

O 

fl 

cd 


Sn 

«2 

y 

fa 


CO 

(D 

T3 

O 


S 3 


co 

S* 

O 

-M 

cd 

y 

<D 

fa 

o 

0) 

c 


0 

•p^ 

cd 

t* 

0) 

fa 

8 

1 

Q) 

0) 

Sh 

p £ 

H 


c 

o 

- 4-9 

cd 

t-i 

0) 

fa 

0 

O) 

1 

hC _ 
fl ^ 

2 t-t 


y 

Q) 

£5 


£ 

o 


y fa 

PS 

y 0) 


y 

s* 

£ 


s-> 

cd 

X 

cn 


>> 

fl 

O 

c 

o 


co 

O 

fa 

13 

u 

£ 

& 

T3 

<D 

fa 


I I I 


co 

CO 

ES 

fc- 

£ 

c2 


a 

.2 

fa 

fc* 

<D 

co 

£ 


5 

O 

£ 

<D 

PS 

u 

o 

•+j 

y 

y 

fl 

£ 

O 

fa 

Id 

y 

U 

-w 

y 

•2 

fa 


1368 


- ORU Removal/Insertion 

- Electronics Card Removal/Insertion 

- Multiple Bolt Seating/Turning 
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(MOTES), maintains the capabilities of the previous system but requires 
less computation capability and is more modular in design. 
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Parameter Driven Task Execution 
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MOTES 

MODULAR TELEROBOT TASK EXECUTION SYSTEM 




MOTES Data Flow Diagram 
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FY91 ON-GOING WORK 
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X-WINDOWS GRAPHICAL USER INTERFACE 
VIDEO DISPLAY ON IRIS 


The major FY91 accomplishments to date are as follows: 

-Dual arm coordinated control; this capability was developed to allow the manipulator arms to 
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testbeds at user flight centers entremely important if indeed the technology is to ever be 
employed. 
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The previous viewgraphs discussed the importance of the local-remote architecture in 
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OCMV 

UMI 

Task Generator 
Video/Graphics 
Space Ball 
Task Simulation 
Spatial Planning 
Knowledge Base 

HC (s) 


Robot 

Arm(s) 


Teleop 
data * 


- Executive 

- Monitor 

- Dispatcher 

- Sensor 

- Control 

- Fusion 


This implementation is for real-time teleoperation. 

This implementation will allow macro parameters to be sent to the remote 
site VME chasis; but, in the future, HC data will also be sent across this 
communication link. 
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TELEROBOTIC GROUND-REMOTE OPERATIONS 
Operator Control Station Software Block Diagram 




o 

i- 

CL 

LLI 

O 

DC 

LU 

Q. 

Q 

LU 

I- 

g 

(/) 

0) 

< 

R 

DC 

O 

h- 

< 

DC 

LU 

Q. 

O 



O ir 
N O 

~ ro 

= g ® § 

2 .1 g-o 

•■2»l 

S§.r? 

0)0 (/> 

O 0.0 

o £:■= ro 

0-0 

-of §_£ 

CD > O. 


O 


.52 c 


ro 

03 

I 

O 

ro 


ro o 
o o3 

O O 0 XT 

£ 

2 ro ? a> 

3 n o o 

ro Q o 
3 c * ro 

^ O -Q cC ^ 
° .2 c -p o 

CC .2 ^ (D c 


o 

c 


_ > O) ro 

QlOJ o “ 

o ro o 


ro 


si 

Q)~ 

c > o o 
o g ro w o) 

ac fro 
o o 


Q-o 

O 

3? ro 


E 

ro 

*o 

c 

3 


O 


o E ’■*= p 

3 O *C 3 
Q_-- O) CL 
C 2.0 C 

8 £ s 8 


0 
CD 
P 

|fo 

Q_._ H— 

2 o ro 

1 i"§ 

o q Q 

E > o 
o 

roj 
0 -E ro 

> P 3 

ro E 8 

■8S.I 

> *r jd 

2 ro o 
O-Q. § 
E: W 

O 
ro . 


CD 

C/D 


P ro - 

rod 


2 

ro 

V— 

CD 

Q- . 

o ro 

2° 


to 


jQ O 

-2-5 

-O C 
P CO 

o to 

E§ 


>%■*£ 
.— ro 


; ~o 3 

br 

w/ — O 
7^ 3 

ro o 2 
CD 

w Q. 

-Ic ° 

C Q_ (D 

o ro x: 

Q. O) > 

§5§1 

®= « c 
Q-O ro o 

r- $ >>-^= 

|“ls 

■O !- O _ 

■= p p£ 
ro c »- *5? 

c q Q. 

o ro ^ p 
h- oCOtj 


m w 
ro r- 

p CO 

CD -i= 

ro 2 
ro o 
o 

o "O 
!cT E 
o g 

vh- fc 

° E 
ro o 
~o o 

o- 

El 

>^-Q 
CO CD 
~ O 

o co 


> 
o 

W CD 


Q_ 

W 


&.£ 

<58 


CD 

*o 

§£ 

o E 

-2.8 
-O CO 
O O 

E 


o 

c 

o 


c 

CO 

o 


c 

_ o 
co ‘ro 


> 
^ <D 

0>3 


ro 


S P •= 


"7a P 


O 


-g ro 

-Q 3 

ro t= 

3 - 
o o 
ro 0 

ra-S- 

2o >- 

*0 0 O 

p £ ro 

J£s 

1 §J 

55 p o 

p 

-o.E ro 
o o c 

•go 0 
p T3-3 
CD > © 

o£ c 
O $ P 


'=*5 ±= ^ 


0 P .2 

n 

P o ro 

3 > o 

O O Cl 




I§ 

s 

$ 

DQ 


to 

CO 

I 

§ 

g 


1399 



Tdr 

VSV/N 





o 

DC 

LU 

CL 

Q 

LU 

h- 

<f) 

GO 

CO 

< 

I 

DC 

O 

H 

< 

DC 

LU 

a. 

O 



li-s 

■g-gj 

O §.-§<2 
■O ^ ' c 
C O 2 0 

re ra-S E 

o ®o £ 
~ aco d 

8° e « 

R-ojE | 

® IS ^ o 

o 2 </> ra 

S-S S>o 

SS-IS, 

.E o-- co 

E«of 
E o q.E 

B °-~2. o> 

0 ‘C > c 

■D O C tf5 

• 0.0 =3 


0 


roS g 


a. o>'« w 

E.S5 « 

O (O > t 

o 3 o~ 

. • i 2 0 0 
c 0-0 0) 
0.0 O 8 

•• 0*2 E 2 

0 N ° o O- 

_Q == C-F c 

« 3 g Q..2 

0 oOco.o 

0 

t n .2, o o cl 

C 0 

.2 O 

CO 

0 • 

Q. 

o 


CO ~ -ri 

o 0 2 *o 2 

•■g o 1 1 0 

°3 8 «s 


0 

JZ 


*D 

o 

E 


0 ca 

CO 0 


o o _ 

0 .0 Q. 
0 .Q O 

| 

w § C O 

C ■£2 0 *J3 0 

.rag 

to w -o x O 
0 0 
■o o o.^.£ 
o ~ P- cp 

^ C nj 0 

- O O ® O) 

o ^ co 2 c 

>-D 2 
- 3 6 


0 


o 

l- c 

o 


0 

C 


- * Z < C 


0 

0^000, 

$ 2 2-° 2 
o 0 E o‘o 
= 0 0 

<^_Q 0 ^ 
. . O -T 3 >,0 

0)0 0 0 O 

.e-q Is 

g O Q 

O Q) 

0 u o wi! 

cRo rac 

ra -g-a-g o 
e c -O 5 o 
o o o & o 

'4=-^=; r- >*<0 

0 0 > £ o 

£ ® § £ s 

o >- c E 

o c c 0 E 
.2,0 3 0)0 
.0 


0 


0 

rog 

.§! 

O Q.*K 

-S o g 


*o .2 

*> 2 
z_ 0 W 

2 0 2 
co E * 
2 [0 o. 

w ° co- 


0 


E go 

.2 
o £.0 

o E ° 
0 o c 
©*i= g 

W CO o 
o 

T o _ 

2>E 
2 0*c 

0 3 0 

Q. o 0 

O O £ 

W £ Q 

£ g £ 

o t 


• ■ . _ 

5 g 
0 C 

IS 

t= a 

V 

fi 

ra.o 

0 T 

6 


g 

cb 


<§ 

8 

$ 

DQ 


£ 

6 

tt 

s 


1401 


ncir 

VSV/IU 


0 CD 
0 "D c/D 
U O O 
0*£ Q. 

E CD *o 

all 

2 co i= 
o - CD 

o-fg E 
+- 0 o 

--O 0 

o o D) 

2 = o 
0 DDf 5 

CLC £ 
0*-s= O 

05 x o 

•i S« 
£ — 0 
O'o c 

7 B ® E 
..So 
0>-0 0 
•Sg-D 
~ ^ o 

T 5 0 ■+- 
T 3 0 .O 

EIq .0 
^ o > 

g c 0 
.2 > c 

*5 o 1c 
0 c o 

2 § e 

.o oiT 

XJ 

O 


o 

Q_ 

0 0 
0 > 

.i 2 

0*5 

0*S 

"D 0 
> CD 

oji 

**“ o 
0 0 

2 0 
0 0 


1402 


TGRO-7 Bruce Bon 8/8/91 


STATUS 


£ 


J 

a. 


~0 0 
c <d 

0~ "o 

2 £ 

9-T3 
E O 

O c 
« § 
.2 E 

C 0) 

0 a. 

*§.§ 
:= <b 

0jo 
— o 

01 

4^ H— 

3 O 
03 

.E c 
0 )'o 

if fc 

CD 

<D 

IS 

E ® 

O *D 
O c 

I§ 


®g 

c/) .Cz 

W7 rj 

<D .ir 

-*— i 

w c 

|£ 
oro 

O CD 

^ 00 
0-3 

E ® 
g co 

0 CO 
o -O 

S; 3 

h" oo 


3 Q. » 0 *0 o *2 

0 00 ■=; C -C r-v m 

Q..| x-a c-o oj. 

E^oqjOjoe --- gc 

oE-o-oC-^Q>a>'>0 
0 0 2 c 9r c Q-_o ^ E 

Q. 


B-a g-g.o'1 c-E’-v-o 
®Ji~oc/)5.2S-o® 
E5 ccj,2i» 2 E-o-d 

■dS’Ss^'S 


20 ® § £ 


o'® = 

73 ^ CO 
c -♦=; 0 
s Qr 


^ ~Q C. w O 

0T30^-^a3 f A 

E0Q.^> m ^CO 

E c = ® ® 8 mZ 

0 C/J) c-c co — _c 

p v <H-5.go 

aJ Cm.^ 0 $ 


o 

Z. ^ 0 o>E o 

^2 2 ~ t- 

3=5 
o 

Soc 


P^IlrE £-1 S)i2 8-f 

5= Jl 

k Q/P 
O 0 _0 


_Q C 

°«o5® 
0)0 


u£oc%^ _ 

®§§e| *-gi®§ 

~-=-® w'=xOcj= 3 8 

“So. ® 2,< w 2 ® ffl 2 

c c — J~0> 0 O 


^ 0*0 


0 


0 


0 O -0 0 H- 

l_ ■*—• o 


CO "S 
-> 0 


0 0 


Q.C.i2Er-- c =4- ~ 

0 3 0 _C [fl o •> c >,Q- 
0 - - 0 ^ 0-0 

re 0X3 E 0:£ 

(- -*=t c q. i_ ~ 
0 O ^ $ 


_ _ §5 O ._^ =a __ 

§ g g sf|§gS8-t'i 

E Oow™§-cc®o>. 

Z ®n®oE“l-2$.2| 

o tr\ Q_*rs (Ti 0 /-\ m -rt “■ 


0 
> 

2 C 
A 0 

S-E 


0 
E 

SSgSS 

ol--J 2 0 


E ® 
0 E 


_*: 

c o w (- 

e-sisig 

w c _Q r- O *— « 

§ c ©coc S-r 


-Q 00O)00g 5 0EP>Q. 

5 j55§^®®« = 3c2 


i. n uj w 

^ 0.2 T5 JD 


3 c ir 
o.E o) 


VJJ w 

E®g 

Its 

ts E.S 
® 8-s 

g»9 


§f^ t 'S.2-e“®= 15® = 

C0 .E-t— >>>_ q>00T3^-0 2^0 

i-2¥ZSrS = «a Sl-i 


E-i 


2-0 0 cl 0 -a 0 Sq E 0 
Os 3-9 Pw^ 0=3 

®> 85-42°=? Oo. 


0 


0 


CO '0 a 

CO ^ 0 
0^0 



^ W • 

ocn-a 


0 


S 

co 

c 

t§ 

8 

$ 

CQ 


to 

00 

I 

§ 

g 


1403 


it 


co 

H 

< 

H 

</) 


0 

'0 

0 

0 

o 

c 


Q_ 

0 

O 

X 

0 

0 
-4— » 

0 

Q_ 

E 

o 

o 

■ • 

E 

0 

CD 

O 


0 


0 

0 

Q. 

E 

o 

0 

*0 

> 

_0 

1 

Cl 

o 


0 

o 

t: 

0 


0 
C 0 


0 

O 


Q. *j= 
C Q. 
0 


o 


0 
•4— » 

0 

Q. 

E 

o 

o 

CD 

c 


0 

"O 

o 

E 

c: 

o 

‘0 

> 

0 

c 

o 

0 

E 

• • 
c 
o 

o. 

0 

0 

0 

CL 

0 

0 

■*—> 

0 

'co 

CO 

< 

1 

u- 

o 

•*—> 

0 

k_ 

0 

CL 

o 


o 

CO 

o 

0 

0 

tc 

o 

CL 

0 

>* 

4-' 

O 

c 

■ ■ 
c 
o 

4—* 

_0 

3 

g. 

*c 

0 


0 

0 

0 

*£ 

0 

CL 

13 

C/D 

1 

o 

•4—> 

0 

k. 

0 

Q_ 

o 


CO 

.2 

CL 

0 


0 

0 

_0 

CL 

0 

0 

0 

0 

E 

o 

k_ 

V4— 

o 

0 

0 

> 

o 

0 

*_ 

0 
0 
• • 

3 C 
13 0 

0 E 

-> o 

0 0 

o > 

— <D 

cL" 0 
5 0 
0-0 

O 3 

0 

*o 

• 

> 


Q 

CD 

I- 

0 


03 £5 


0 

2 "o 

o C 

3 0 

3 CL 

0 E 

“O •*= 

*0 O 

c c: 

0 3 
c-Q 

w -~t 

° -o O 

§& 

O) 0 

c 0 

jE 0 

is* 
0 


0 
«— • 

0 

*0 

0 

O 

0 

M— 

U 

0 

C 


0 
-4— » 

0 

Ql 

E 

o 

o 

c 

o 

4— » 

3 

0 

j*: 

0 

« » 
0 

o 

0 

O 


E 

E 

o 

o 

k_ 

o 

£ 

0 


CD 


O 


“T3 ^ 

0 o 
o 

_0 0 

**“ 0 
• • o 
0 c 
0 C 
0 ~ 
CD 3 
03 

CD CL 

0 E 

3 5 

£ u 

o 

c 


§ 

§ 

00 

c: 

t§ 

8 

3 

CQ 


00 

I 

§ 

s 


1404 



Collision avoidance is a prime safety concern for space operations as cited 
several times in the Fischer-Price report. Computer modelling, augmente 
cameras, is currently the preferred robot collision avoidance technique. 
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determine edges (sufficient for collision avoidance) and which does not require 
imaging and a large number of pixels? 
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is a good one. And, sensors with their attendant electronics must be added to the 
payloads. End Effectors and robot arms and integrated into the system. 
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ranges in excess o 



I 


ORIGINAL PAGE IS 
OF POOR QUALITY 



This pair of diagrams explains the "Capaciflectoi" principle. The diagram on 
the left shows a normal capacitive sensor in the presence of a ground plane. 
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improving range and sensitivity at no penalty in "stand-off'. The shield acts 
as a capacitive reflector, hence the descriptor "Capaciflector". 
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ORIGINAL PAGE IS 
OF POOR QUALITY 
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Capacitance sensing operates exceptionally well in a vacuum, even better than in air. Also, 
the lack of humidity changes in space is an advantage. This sensor senses any thing that either 
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SPACE SUITABILITY 



Indefinite operation w/minimal drift 
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The payload is the most vulnerable region in collision 
avoidance. It is the object that sticks out the furthest 
and it is also the region that the camera cannot see 
behind. It has blind spots. An array of "Capciflectors" 
can easily be added to each Orbital Replacement Unit 
(ORU) and eliminate these blind spots. Our calculations 
and lab experiments indicate that not many sensors would 
be needed (typically 4 to 8) and power, leads , circuitry 
and compute power would not be burdensome. With these 
sensors, one could practically ensure that the ORU would 
not collide with anything no matter what the 
circumstances. That is, even if the computer model is in 
error, an unexpected event occurs, the operator is 
inattentive, lighting conditions are misleading or blind 
spots are encountered , the ORU will still not experience 
a collision. Clearly with the enormous emphasis on safety 
and the value of the ORU payloads, this sensing protection 
will be essential. The only question is whether power and 
signals can be sent between the robot and the payload. As 
will be shown in the next slide they certainly must and can. 
It also turns out, that our lab experiments have shown that 
payload collision avoidance can be extended to include 
docking; even in a cluttered environment in which several 
payloads are placed close together. The docking accuracy 
of the "Capaciflector" to a simple coded passive element 
in the attachment region is surprisingly good; several 
times better than what is required for docking. And, it 
seems apparent that the same techniques in collision 
avoidance and docking should be extended to the End 
Effectors themselves. GSFC has also begun this research 
starting with the robot attachment mechanism (foot). 

This slide shows a photo of the GSFC robot foot. Conceived, 
designed and developed in-house at GSFC, this device has 
been incorporated into the Flight Telerobotic Servicer 
(FTS) End Item Specification and can attach the (FTS) to 
the Space Station structure with sufficient repeatability 
and strength to meet all requirements. Also, it can make 
all necessary electrical power and electronics and fiber 
optics signal connections. A miniaturized version of this 
(approximately the size of a cofee cup) is in fabrication 
to serve 
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ORIGINAL PAGE IS 
OF POOR QUALITY 



Capacitance sensing operates exceptionally well in a vacuum, even better than in air. Also, 
the lack of humidity changes in space is an advantage. This sensor senses any thing that either 
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DIRECTIONS IN SENSOR DEVELOPMENT 
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In exploring the sensory-based collision avoidance problem it 
soon became clear that this technology kept going deeper; first 
arm collision avoidance, then payload collision avoidance, then 
payload docking, then End Effector collision avoidance and 
docking. Apparently a missing key in the hierarchy of sensors 
has been found. We now have vision, collision avoidance, 
precontact forces and contact (tactile) forces. In the past, collision 
avoidance and precontact forces have been missing. In the animal 
world we see an example of this in the whiskers on a cat which 
enables it to go through small holes in the dark. The "Capaciflector" 
system provides electric field whiskers for robots and payloads. 

This has very significant and fundamental implications for robot 
control strategies. Adaptive control techniques are much improved 
resulting in smoother, safer, more precise and efficient performance. 
We have much more information where and when we need it so 
computer modelling will yield somewhat to local sensory-based 
information. At the same time, computer modelling information 
will be combined with local path planning strategies and enable 
the robot to perform limited search routines to verify the 
environment before it begins docking. The operator can be involved 
as needed. For example, if the model and the sensor disagree, the 
robot can back up and signal the operator to take a look and resolve 
the disagreement And, the operator will now be able to "feel" 
precontact/proximity forces. But, even though we will have more 
information at the local site where we need it, the total required 
information can be reduced. 
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AEROBRAKE ASSEMBLY TEST 
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On-Orbit R. Vargo Design, F. DeJarnette 
Ops, Fab G. Lee 

Robotics J. Filatovs 
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A number of follow-on tasks have been identified, but 
funding constraints have pushed them to the right. 


MDSSC/MMRC AEROBRAKE ASSEMBLY 
PROJECT -SCHEDULE 



1 PDR 

2 CDR 

3 Mockup shipment 

4 UWTF Tests - scuba swim-through 

5 UWTF Test - EVA suited subjects and telerobotic arm 
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MDSSC Underwater Test Facility is only 70 feet wide, we 
were constrained to only testing several representative 
components, which are indicated by the shaded areas. 
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MOCK-UP DESIGN 
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initial assembly tests, but future iterations should 
eventually incorporate higher fidelity components. 


MOCK-UP DESIGN 
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ALTERNATIVE LATCHING ARRANGEMENT 
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Drive Shaft 
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CANDIDATE TPS INTERFACE OPTIONS 
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PETAL INSTALLATION TIMES 
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Space Station Freedom — McDonnell Douglas * GE * Honeywell • IBM • Lockheed 
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AEROBRAKE TIMELINE COMPONENTS 
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Space Station Freedom 


FOLLOW-ON ACTIVITIES 
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1991 AEROBRAKE TEST SET-UP 
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1991 Aerobrake Test Set-up 
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THE NEXT AEROBRAKE MOCKUP WILL GIVE US THE 
ABILITY TO ASSESS DESIGN AND ASSEMBLY ISSUES 
ASSOCIATED WITH AN ENTIRE LTV 
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Rotate Turnstile -30 
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Move Panel Canister into Position 
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